Keywriter Log:
Generating Single signed certificate!!
# encrypt aes256 key with tifek public part
# encrypt SMPK-priv signed aes256 key(hash) with tifek public part
# encrypt smpk-pub hash using aes256 key
writing RSA key
# encrypt smek (sym key) using aes256 key
3994 primary_cert.bin
3994 ../x509cert/final_certificate.bin
# SHA512 Hashes of keys are stored in verify_hash.csv for reference..

The red line shouldn't be printed

Note: The smek is randomly generated in this case, but the active flag in the extension is set to false. So smek is not actually programmed into efuses, but the user gets an impression that smek is being set becuase of the log messages printed by the script.